💼 9.2 Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service

• ID: /frameworks/cis-azure-v1.1.0/09/02

Description

Azure Web Apps allows sites to run under both HTTP and HTTPS by default. Web apps can be accessed by anyone using non-secure HTTP links by default. Non-secure HTTP requests can be restricted and all HTTP requests redirected to the secure HTTPS port. It is recommended to enforce HTTPS-only traffic.

Similar

• Internal
  • ID: dec-c-8c0c667b

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ Azure App Service HTTPS Only configuration is not enabled🟢	1	🟢 x6	no data

Internal Rules

Rule	Policies	Flags
✉️ dec-x-75db76ad	1